Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File:                     D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier:          6cDT7f7KC1EZmdiuwylI2PhhHp7C3xlHcaZ1m8gQ1Rc=
Subject key identifier:   F7:45:BD:CB:1E:ED:D5:A5:97:60:8B:FA:09:8F:4B:A9:BC:70:83:49
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer:       /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial:       018F3776676B23EBBF683F3B1418BCC4A7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number:          0E72
Signing time:             Thu 02 May 2024 04:00:57 +0000
Manifest this update:     Thu 02 May 2024 04:00:57 +0000
Manifest next update:     Fri 03 May 2024 04:00:57 +0000
Files and hashes:         1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: b7SZha7louQFzR4DApeda+Ys/Qrwa5xVhJSrUys8pow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:76:67:6b:23:eb:bf:68:3f:3b:14:18:bc:c4:a7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
        Validity
            Not Before: May  2 04:00:57 2024 GMT
            Not After : May  3 04:00:57 2024 GMT
        Subject: CN=f745bdcb1eedd5a597608bfa098f4ba9bc708349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:97:c3:74:5b:e3:c4:27:66:14:94:48:6a:7a:
                    df:37:d4:ce:ea:a9:a4:75:d0:4a:5c:91:2d:f3:cd:
                    01:6d:67:2b:48:af:cc:26:81:ff:4d:ae:bf:82:54:
                    da:8d:59:a6:f4:51:d1:c5:87:d9:b5:15:87:b7:a3:
                    cf:46:a9:8c:bf:fd:dc:c7:d2:0c:62:f3:13:9c:8f:
                    9c:ff:92:ce:fb:b7:34:c8:00:02:9d:1f:fd:ff:4b:
                    e9:dd:37:00:56:d0:c2:0a:fb:fa:7b:07:ca:01:b6:
                    e5:97:50:15:8e:d8:37:cb:68:3b:46:d4:f9:0f:d3:
                    b9:0b:3f:9a:80:b3:e3:9d:49:35:1e:e6:39:e5:d5:
                    e4:b9:78:fa:1b:5a:10:a1:f8:fb:a8:c2:65:05:94:
                    a2:f1:a8:a2:03:eb:7c:fe:1d:55:c5:aa:b5:cf:c2:
                    7f:43:d6:9a:c6:87:1e:fb:2d:cc:ce:b3:ec:e2:9a:
                    a4:c9:be:73:30:17:c8:24:42:7f:1a:d2:b4:c9:3c:
                    74:81:5d:77:76:05:16:40:2b:35:82:12:8c:93:00:
                    08:06:5d:54:60:83:fe:59:22:b6:1f:e6:e9:0b:e9:
                    99:b3:cf:a3:40:0d:ce:ef:2c:af:8b:0b:ca:38:60:
                    35:9d:6d:9b:d0:e2:71:8d:be:fd:29:76:9c:06:fc:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:45:BD:CB:1E:ED:D5:A5:97:60:8B:FA:09:8F:4B:A9:BC:70:83:49
            X509v3 Authority Key Identifier:
                keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:9d:70:48:a1:9a:4e:5f:87:8a:8c:c1:e9:f3:e1:fa:d6:66:
         a7:1f:0a:bb:66:12:de:a2:00:bd:28:af:62:49:9e:83:60:fe:
         b4:7e:4b:2d:4a:17:23:eb:b0:b1:6e:19:f7:94:97:31:e7:29:
         6a:6e:5f:3e:cd:69:40:99:a3:f2:5b:fe:0f:10:54:ad:3f:99:
         fd:f6:24:d7:b0:2b:df:f4:4a:89:22:a0:fa:ee:c0:f7:06:c7:
         e6:03:07:90:7c:94:90:83:df:7a:36:93:cf:86:0c:62:bf:e9:
         44:4d:09:4a:37:48:82:17:88:78:05:27:4b:17:0f:ba:ac:2a:
         48:d2:41:f9:70:38:fb:8d:d6:85:d7:e5:62:e0:f5:0b:74:d8:
         70:f2:17:8a:17:44:5f:84:b5:77:7c:e0:8d:7c:d2:38:c5:4b:
         15:49:32:69:92:dc:69:02:e5:93:2a:f1:36:0e:69:9b:fc:08:
         fe:18:73:94:aa:14:20:24:9f:57:e0:e6:b9:25:ea:cc:f6:25:
         3c:c2:a7:0f:f7:bf:6e:46:dc:09:40:0e:58:3b:47:d6:f5:2c:
         fc:06:a4:7a:f8:55:af:17:d6:b3:ce:ee:63:2f:62:96:1e:3c:
         0a:fa:40:72:2d:88:42:16:41:18:26:a9:cf:7a:46:20:04:43:
         35:12:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:32:50 2024 by rpki-client on console-fra.rpki-client.org